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Amendments to the Claims: 

This listing of claims will replace all prior versions and listings of claims in the 
application. Please amend the claims as follows: 

Listing of Claims: 

1 . (Original) A method for negotiating a set of security parameters usable 
by an initiator and a responder to create a secure path over a network for exchanging 
information, the method including a plurality of modes, comprising: 

conducting a main mode negotiation for establishing the secure path and selecting the 
set of security parameters including a security protocol; 

conducting a quick mode negotiation for deriving a set of keys usable with the 
security protocol; 

wherein at least a portion of the quick mode occurs during the main mode and a 
quick mode pseudo random number is exchanged between the responder and the initiator; 
and wherein a protocol security process establishes inbound and outbound protocol security 
associations. 

2. (Original) The method of claim 1, further comprising: 
conducting a first user mode for authenticating a first user associated with the 

initiator or responder. 

3. (Original) The method of claim 2, wherein the initiator and the 
responder exchange 

authentication data that is calculated by application of a hash function incorporating a 
secret key on data exchanged during the main mode. 

4. (Original) The method of claim 2, further comprising: 
conducting a second user mode for authenticating a second user associated with 

the initiator or the responder. 

5. (Original) The method of claim 1 , wherein the main mode comprises: 
sending, from the initiator to the responder, a set of proposed security parameters 
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and authentication data; 

selecting, by the respond er, the set of security parameters from the set of proposed 
security parameters; 

sending the set of security parameters from the responder to the initiator. 

6. (Original) The method of claim 1, wherein the initiator identifies a 
public key of the 

responder prior to the main mode negotiation and wherein at least a portion a first 
message sent from the initiator to the responder is encrypted using the public key. 

7. (Original) The method of claim 1 , wherein the main mode comprises: 
sending a group advertisement from the initiator to the responder; and 
comparing the group advertisement to a set of authorized groups; and 
sending a response from the responder to the initiator. 

8. (Original) The method of claim 1 , further comprising: 
exchanging Diffie Hellman key data between the initiator and the responder 

during main mode for deriving keys for use with an encryption algorithm. 

9. (Original) The method of claim 1, further comprising: 
exchanging a pair of notify payloads between the initiator and the responder; 

wherein the pair of notify payloads are used by the protocol security process for 
establishing the protocol security associations. 

10- 17. (Canceled) 

18. (Original) A computer-readable medium for executing computer- 
readable instructions for negotiating a set of security parameters usable by an initiator and a 
responder to create a secure path over a network for exchanging information, the method 
including a plurality of modes, comprising: 

conducting a main mode negotiation for establishing the secure path and selecting 
the set of security parameters including a security protocol; 
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conducting a quick mode negotiation for deriving a set of keys usable with the 
security protocol; 

wherein at least a portion of the quick mode occurs during the main mode and a 
quick mode pseudo random number is exchanged between the responder and the initiator; 
and wherein a protocol security process establishes protocol security associations. 

1 9. (Original) The computer-readable medium of claim 18, further 
comprising: 

conducting a user mode for authenticating one or more users associated with the 
initiator or the responder. 

20. (Original) The computer-readable medium of claim 1 9, wherein the 
initiator and the responder exchange authentication data that is calculated by application of a 
hash function incorporating a secret key on data exchanged during the main mode. 

2 1 . The computer- readable medium of claim 1 8, wherein the initiator 
identifies a public key of the responder prior to the main mode negotiation and wherein at 
least a portion a first message sent from the initiator to the responder is encrypted using the 
public key. 

22. (Original) The computer-readable medium of claim 18, wherein the 
main mode comprises: 

sending a group advertisement from the initiator to the responder; 
comparing the group advertisement to a set of authorized groups; and 
sending a response from the responder to the initiator. 

23 - 25. (Canceled) 
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